SOOSAN INT Co., Ltd Personal Information Processing Policy
The "eWalker SSL VPN" (hereinafter referred to as the company), operated by SOOSAN INT Co., Ltd., does its best to protect users' personal information and provides services in compliance with laws related to personal information protection such as the "Act on Promotion of Information and Communication Network Utilization and Information Protection, etc." and the "Personal Information Protection Act." This personal information processing policy is subject to change in accordance with the relevant laws and regulations and the internal policies of the company.
Article 1 General Provisions
Personal information refers to information about living individuals that can identify the individual based on the name, date of birth, gender, e-mail, etc. contained in the information (including those that can be easily identified in combination with other information, even if the information alone cannot identify a specific individual).
"eWalker SSL VPN" tells you how and how the personal information provided by users is used and what measures are being taken to protect personal information through the personal information processing policy.
Article 2 Scope of Collection of Personal Information
"eWalker SSL VPN" is a virtual private network solution mobile client app that requires the issuance of user information (ID) to access the customer's virtual private network. Only employees of the customer company can access it, and the membership process is not carried out on the app.
[Scope of personal information collected when registering as a member]
- Required items: User ID, password
[processing of unique identification information]
- The company collects the following personal information items in accordance with the law under the provision of goods or services.
[Personal Information of Virtual Private Network Access Users]
- The collected unique identification information is not provided for any purpose other than the purpose of collecting personal information, except as provided by the Personal Information Protection Act and other laws.
Article 3 Consent to the Collection of Personal Information
Users who access the virtual private network are targeted at the customer's employees and do not request personal information directly from the "eWalker SSL VPN" app.
Article 4 Purpose of Collection and Use of Personal Information
"eWalker SSL VPN" collects personal information for the following purposes to provide optimized and customized services to users.
- Only ID and password are collected for identification of users accessing the virtual private network.
Article 5 Collecting personal information by cookies
"eWalker SSL VPN" does not collect cookie information.
Article 6 Off-Purpose Use and Provision and Sharing to Third Parties
"eWalker SSL VPN" uses the user's personal information only within the scope notified by "Purpose of Collecting and Using Personal Information" and does not use it beyond that scope or provide it to others, other companies, or other organizations.
Exceptions are made in the following cases.
If there is a request from a related agency for investigative purposes in accordance with the relevant laws and regulations of Korea
If there is a request in accordance with the procedures prescribed by other relevant laws and regulations
In principle, when information is provided according to the relevant laws and regulations or at the request of an investigative agency, it is operated to notify the parties. However, due to legal grounds, you may not be able to notify. We will try not to provide information indiscriminately against the purpose of collection and use of our personal information processing policy.
Article 7 Reading and correcting personal information
The personal information of users who are allowed access to the virtual private network requires only basic ID and password, so personal information is not notified.
Article 8 Withdrawal of consent to collecting, using, and providing personal information (user withdrawal)
The company shall handle this immediately in accordance with the relevant laws and regulations.
Article 9 Period of retention and use of personal information
The user's personal information will be destroyed when the purpose of collecting or providing personal information is achieved as follows. However, in accordance with the provisions of related laws such as the Commercial Act, if it is necessary to hold for a certain period of time due to the confirmation of transaction-related rights and obligations, etc., it shall be held for a certain period of time.
In the case of membership information, personal information is maintained for a certain period of time, such as withdrawal from membership or expulsion from the .
Enforcement Decree of the Consumer Protection Act in Electronic Commerce, etc.
Records on contracts or withdrawal of subscriptions: 5 years
Records on payment and supply of goods, etc.: 5 years
Records on consumer complaints or disputes: 3 years
If you request to view the transaction information you have with the consent of the user, you will be able to check the access information without delay.
Article 10 Technical and Administrative Measures for Personal Information Protection
① Technical countermeasures
"eWalker SSL VPN" takes the following technical measures to ensure safety so that personal information is not lost, stolen, leaked, altered, or damaged in handling users' personal information.
Your personal information is protected by passwords and files and transmission data are protected by encryption.
"eWalker SSL VPN" adopts a security device (SSL) that can securely transmit personal information on the network using a cryptographic algorithm.
In preparation for external intrusion such as hacking, unauthorized access from outside is restricted through analysis of blocking systems and vulnerabilities.
② Management Measures
"eWalker SSL VPN" limits users' access to personal information to a minimum number of people. The minimum number of persons is as follows.
Employees who directly deal with users and perform user support tasks
Employees who perform personal information management tasks such as personal information management manager and person in charge
Employees who are forced to handle other personal information on business purposes
Regular in-house and external training are provided for employees handling personal information on the acquisition of new security technologies and the obligation to protect personal information.
We prepare internal procedures to prevent information leakage by executives and employees and to monitor the implementation and compliance of the personal information processing policy by preparing a security pledge to personal information-related operators when signing a labor contract.
The transfer of duties of personal information-related handlers is thoroughly carried out while security is maintained, and the responsibility for personal information accidents after employees and employees leave the company is clearly distinguished.
Personal information and general data are not mixed and stored, but stored separately.
The user is responsible for the user's personal mistakes or what happens to the user's Internet environment. Each user properly manages ID and password to protect his or her personal information and is not responsible for it in the "eWalker SSL VPN".
If an internal administrator's mistake or technical management accident finds a problem with personal information loss · leakage · tampering · damage, “eWalker SSL VPN ” tries to immediately notify the contents and correct them.
"eWalker SSL VPN" allows users to provide links to other companies' websites or materials. In this case, "eWalker SSL VPN" has no control over external sites and materials, and therefore cannot be held responsible and guaranteed for the usefulness of services or materials provided from it. If you click on the link that "eWalker SSL VPN" contains and move to the page of another site, the privacy policy of that site is irrelevant to "eWalker SSL VPN", so please review the policy of the newly visited site.
Article 11 Rights and obligations of users
Please enter the user's personal information accurately to prevent unexpected accidents. You are responsible for accidents caused by inaccurate information entered by the user, and the contract may be terminated if you steal other people's information or enter false information.
Users have the right to protect their personal information, as well as the obligation to protect themselves and not infringe on others' information. Be careful not to leak the user's personal information, including passwords, and do not infringe on or damage the personal information of others, including posts. If you damage the information and dignity of others, you can be punished by the relevant laws.
Article 12 Collecting Opinions and Handling Complaints
"eWalker SSL VPN" values your opinion and you have the right to always receive sincere answers from questions.
"eWalker SSL VPN" operates a customer center for smooth communication with users, and the contact information is as follows.
E-mail : bskim@soosan.co.kr
We will sincerely respond to consultations by e-mail, fax, or mail within 24 hours of receipt. However, in principle, it should be processed the next day after working hours or holidays.
Article 13 Personal Information Management Manager and Manager
"eWalker SSL VPN" is committed to ensuring users have secure access to useful information. In protecting personal information, the person in charge of personal information management is in the event of an accident contrary to the matters notified to the user. However, despite technical complementary measures, we are not responsible for information damage caused by unexpected incidents caused by basic network risks such as hacking and various disputes caused by posts written by visitors. The person in charge of handling the user's personal information and the person in charge are as follows and we respond quickly and faithfully to inquiries related to personal information.
[Personal Information Management Manager]
Manager Lee Chul-sung (errante@soosan.co.kr )
Article 14 Obligation to Notify Advertising Information Transmission
The "eWalker SSL VPN" does not send advertising information for commercial purposes against the user's explicit refusal to receive it.
Article 15 Obligations of Notice
The current personal information processing policy was enacted in January 2020, and if there is any additional, deletion, or modification of the contents according to changes in Korean policies, laws, or security technologies, it will be notified through the "Notification Matters" column on the website.
[부칙]
This personal information processing policy will be enacted and implemented from July 1, 2022.